$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json) Hash identifier: hC1jMGlk1qBC0w290Y6b93XoBEzJrZSH52+ZUDE5YIg= Subject key identifier: 9D:56:31:72:BA:77:3B:FE:2B:53:3F:40:33:01:2E:2D:F1:F1:F9:AF Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Certificate serial: 035F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft Manifest number: 034B Signing time: Sun 05 May 2024 03:07:09 +0000 Manifest this update: Sun 05 May 2024 03:07:09 +0000 Manifest next update: Sun 12 May 2024 03:07:09 +0000 Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: O8WXfQ4dak11DyVT03wYpx/Uf7Bwt2kGmOUtCheSHGk=) 2: C32984BE6B1011EEACECDE38C4F9AE02.roa (hash: QV8yDdB/aBnujvUw9k5YEZKIEFHi0AQt3Gc1cTTRp5Y=) 3: 08241A166B1111EE99759439C4F9AE02.roa (hash: 4ppChZ9jVbCYg6pjEna3vYQITcTqnyvQumfQReb/zW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Validity Not Before: May 5 03:07:09 2024 GMT Not After : May 12 03:07:09 2024 GMT Subject: CN=6636f7dd-0d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:79:4e:4a:d2:01:39:bb:69:f1:8e:c0:84: cc:0d:c0:25:c7:8b:92:da:6b:e0:5e:8f:a1:72:5a: 13:78:cd:84:fe:e9:7d:fa:8d:89:e9:d5:b4:1e:e2: 69:31:ec:a9:67:ec:55:89:3e:b9:36:71:7b:f0:35: ad:e5:15:d8:3c:39:cd:75:9c:f8:49:84:22:93:f8: 4c:06:fe:97:4b:fb:fa:1e:d8:ed:e8:78:d4:22:ae: 51:8c:e9:fa:26:21:95:e2:8d:82:f5:a8:b6:ee:86: c2:02:0f:0c:1f:cd:69:1f:fd:25:08:81:bf:39:97: 35:2c:a9:41:38:c7:28:9b:20:a7:81:a0:a7:f3:bd: cc:17:2b:dd:26:cb:7e:54:68:a7:30:d1:80:87:ed: a7:55:76:ea:16:68:8a:75:f0:35:b8:75:f5:9b:ae: 6f:3b:67:53:c1:59:aa:23:7f:1c:26:45:ba:2d:1b: 3b:6b:84:4e:a8:0f:0d:d4:d1:b5:ad:21:e2:35:80: 58:ea:85:ad:31:56:9b:de:0b:32:0c:9a:2d:d3:ed: 77:85:a5:fe:29:db:81:7d:f1:6b:c5:f6:31:52:3a: a6:3e:bf:17:56:84:6d:3f:b1:e4:34:e4:59:13:ca: 99:02:d9:0d:08:0c:30:9d:8d:8c:3c:1d:05:47:cd: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:56:31:72:BA:77:3B:FE:2B:53:3F:40:33:01:2E:2D:F1:F1:F9:AF X509v3 Authority Key Identifier: keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fb:68:13:d6:54:81:bf:17:00:6c:0b:19:02:e0:d4:2d:bd: 1d:62:ae:b6:cb:3e:ee:79:8e:7f:40:1e:dd:01:e5:ca:b2:22: dc:bf:b2:48:1b:a4:1c:91:b8:23:cf:d0:ce:d9:a2:e2:b2:1c: fe:41:b1:c9:49:f5:d4:eb:f9:4c:de:41:24:43:9a:d6:a1:c3: c8:75:ce:56:e0:3f:49:eb:4f:96:e0:43:66:ef:5e:24:f1:03: 66:6d:7f:a9:08:14:b5:97:ee:94:f5:82:42:83:12:15:16:9a: 0a:03:30:d0:d3:b9:9e:6e:0b:7f:6f:c9:66:2e:17:34:01:1e: c6:ae:e5:df:1f:24:a4:f0:be:59:84:73:a5:c4:7f:8c:35:ae: 5e:44:ab:bb:13:36:b9:0d:07:87:f3:d6:22:17:4b:7f:89:7d: a5:c9:c5:bb:b8:09:2f:72:aa:3e:19:03:79:40:46:b4:f9:e5: 51:e2:76:91:21:b3:e4:7b:34:73:8c:63:45:04:3c:4c:44:b4: 76:55:54:7b:1f:16:47:e4:34:0c:59:92:aa:8b:a4:ae:7f:2b: 14:77:d3:e1:18:80:80:ac:ef:9e:b7:a8:92:9b:9f:0b:d2:2b: df:77:18:72:2a:dd:2f:23:b1:37:6f:f1:d5:24:82:27:2d:be: 4b:43:80:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2RkQxMTAvBgNVBAUTKEJCREY1OENENjExMjkxRUY1QkExQUFDQjZCMkNDNEVE NTBCMDExNTcwHhcNMjQwNTA1MDMwNzA5WhcNMjQwNTEyMDMwNzA5WjAYMRYwFAYD VQQDEw02NjM2ZjdkZC0wZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVl5TkrSATm7afGOwITMDcAlx4uS2mvgXo+hcloTeM2E/ul9+o2J6dW0HuJp MeypZ+xViT65NnF78DWt5RXYPDnNdZz4SYQik/hMBv6XS/v6Htjt6HjUIq5RjOn6 JiGV4o2C9ai27obCAg8MH81pH/0lCIG/OZc1LKlBOMcomyCngaCn873MFyvdJst+ VGinMNGAh+2nVXbqFmiKdfA1uHX1m65vO2dTwVmqI38cJkW6LRs7a4ROqA8N1NG1 rSHiNYBY6oWtMVab3gsyDJot0+13haX+KduBffFrxfYxUjqmPr8XVoRtP7HkNORZ E8qZAtkNCAwwnY2MPB0FR81W1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1WMXK6 dzv+K1M/QDMBLi3x8fmvMB8GA1UdIwQYMBaAFLvfWM1hEpHvW6Gqy2ssxO1QsBFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZGRC81OUJGMjE0RTc0 NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tlOWJvYXJMYXl6RTdWQ3dF VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5OVl6V0VTa2U5Ym9hckxheXpFN1ZDd0VWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZGRC81OUJGMjE0RTc0NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tl OWJvYXJMYXl6RTdWQ3dFVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB++2gT1lSBvxcAbAsZAuDULb0dYq62yz7ueY5/QB7dAeXKsiLcv7JI G6Qckbgjz9DO2aLishz+QbHJSfXU6/lM3kEkQ5rWocPIdc5W4D9J60+W4ENm714k 8QNmbX+pCBS1l+6U9YJCgxIVFpoKAzDQ07mebgt/b8lmLhc0AR7GruXfHySk8L5Z hHOlxH+MNa5eRKu7Eza5DQeH89YiF0t/iX2lycW7uAkvcqo+GQN5QEa0+eVR4naR IbPkezRzjGNFBDxMRLR2VVR7HxZH5DQMWZKqi6SufysUd9PhGICArO+et6iSm58L 0ivfdxhyKt0vI7E3b/HVJIInLb5LQ4CD -----END CERTIFICATE-----Generated at Sun May 5 03:47:48 2024 by rpki-client on console-fra.rpki-client.org